SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 65548: SAS® Visual Analytics reports embedded in inline frames (iframes) stop working after browser updates that enforce SameSite cookies more strictly

DetailsHotfixAboutRate It

SAS Visual Analytics reports that are embedded in an inline frame (iframe) might fail in various ways after your browser is updated to enforce SameSite cookie settings more strictly. Notably, the Google Chrome 80 update in February 2020 has changed the default settings in relation to SameSite cookies. This change can introduce failures. (For more information, see https://www.chromium.org/updates/same-site.)

When this problem exists, the SAS Visual Analytics report might stop responding while loading, or the report might redirect you to the logon page instead of opening. Typically, this problem occurs when the domain of the page that contains the iframe does not match the domain of the SAS Visual Analytics applications. 

If you believe that you are encountering this issue, you can confirm this by enabling the Chrome developer tools. If the report is impacted by this issue, you see a message that is similar to the following in the console logging:

A cookie associated with a cross-site resource at http://sas.com/ was set
without the 'SameSite' attribute. It has been blocked, as Chrome now only
delivers cookies with cross-site requests if they are set with 'SameSite=None' and 'Secure'.
You can review cookies in developer tools under Application>Storage>Cookies and see more details at
https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032.

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Visual AnalyticsMicrosoft® Windows® for x647.39.4 TS1M3
Linux for x647.39.4 TS1M3
SAS SystemSAS Visual Analytics (on SAS Viya)Cloud Foundry8.2Viya
Linux for x648.2Viya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.